CVE-2024-35935

Summary

In the Linux kernel, the following vulnerability has been resolved:

btrfs: send: handle path ref underflow in header iterate_inode_ref()

Change BUG_ON to proper error handling if building the path buffer fails. The pointers are not printed so we don't accidentally leak kernel addresses.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux31db9f7c23fbf7e95026143f79645de6507b583b < be2b6bcc936ae17f42fff6494106a5660b35d8d3affected
LinuxLinux31db9f7c23fbf7e95026143f79645de6507b583b < 024529c27c8b4b273325a169e078337c8279e229affected
LinuxLinux31db9f7c23fbf7e95026143f79645de6507b583b < 4720d590c4cb5d9ffa0060b89743651cc7e995f9affected
LinuxLinux31db9f7c23fbf7e95026143f79645de6507b583b < 2f6174fd4ccf403b42b3d5f0d1b6b496a0e5330aaffected
LinuxLinux31db9f7c23fbf7e95026143f79645de6507b583b < 9ae356c627b493323e1433dcb27a26917668c07caffected
LinuxLinux31db9f7c23fbf7e95026143f79645de6507b583b < c1363ed8867b81ea169fba2ccc14af96a85ed183affected
LinuxLinux31db9f7c23fbf7e95026143f79645de6507b583b < 03938619a1e718b6168ae4528e1b0f979293f1a5affected
LinuxLinux31db9f7c23fbf7e95026143f79645de6507b583b < 3c6ee34c6f9cd12802326da26631232a61743501affected
LinuxLinux3.6affected
LinuxLinux0 < 3.6unaffected
LinuxLinux4.19.312 <= 4.19.*unaffected
LinuxLinux5.4.274 <= 5.4.*unaffected
LinuxLinux5.10.215 <= 5.10.*unaffected
LinuxLinux5.15.155 <= 5.15.*unaffected
LinuxLinux6.1.86 <= 6.1.*unaffected
LinuxLinux6.6.27 <= 6.6.*unaffected
LinuxLinux6.8.6 <= 6.8.*unaffected
LinuxLinux6.9 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

Additional References

References